Society · Protocols

PermissionEscalate

Requesting elevated privileges for sensitive operations

Definition

Mechanism

Standardizes request elevation. When `Risk > Threshold`, the Agent blocks execution and emits a `PermissionRequest`. Waits for `SignedApproval` before proceeding. It requests a TieredAccess upgrade, often pausing execution until HumanApprove is granted.

Preconditions

  1. Blocked action
  2. Justification

Postconditions

  1. Access granted or denied

Invariants

  1. Approval required for higher tier
  2. Escalation logged

Risks

Failure modes

  1. Privilege Creep

    Escalated permissions become permanent, violating least-privilege principle.

Caution

Grants capabilities beyond normal operating scope.

Relationships

Builds on

References

Mind

Agent

Autonomous Goal-Directed Entity

Infrastructure

HumanApprove

Pause for human approval before critical actions

Nothing in this library builds on this pattern yet.

Reference

Identity

Ref
PermissionEscalate#b239
Sema ID
sema:PermissionEscalate#mh:SHA-256:b2392a102ae384a41f9cd0a4e5ed173860457fb7bb6f336e74d108b904b10036
Ring
1
Tier
1
Updated
2026-11-11
Supersedes
  • sema:PermissionEscalate#mh:SHA-256:744f4ce8439e69d9869b0fd5c260284e5f655861a97140d1487937165dc3deaa
  • sema:PermissionEscalate#mh:SHA-256:d4544d06098df4779b8fe2956c168d331ee3443b531f13eb81b6339ffafdeec6
  • sema:PermissionEscalate#mh:SHA-256:0ca59c3513edbad36bd4775b0fd6145bff74b809b75e23ae4b49f3a6a73da907
  • sema:PermissionEscalate#mh:SHA-256:8419a72597afae82791e7a7745c91e3bf8873851676e838d0a1c4dff23cbad6a
  • sema:PermissionEscalate#mh:SHA-256:1c4907bb861f597e734a8da1a7bfda319c78b4c27dd16db44d809b0838ff09d7